Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
File:                     JG-b54PXPZWriqVGGeYPkBHATWc.cer (raw, json)
Hash identifier:          M2AH/TRx2LTy75DqdyVDm1DLYB5YY0uNxm+NEv91+SQ=
Subject key identifier:   24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01944A0B5F80B1B6FC4119F59865ACB58032
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 09 Jan 2025 07:50:46 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 197937
                          IP: 185.7.172.0/24
                          IP: 2a13:83c0::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:4a:0b:5f:80:b1:b6:fc:41:19:f5:98:65:ac:b5:80:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  9 07:50:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:7e:c0:b8:8c:24:79:04:a9:81:91:b7:40:
                    f0:e9:49:52:72:85:67:a7:a7:a7:81:1d:3e:7c:fe:
                    ab:84:65:cf:14:fc:bc:0e:46:d0:09:32:d8:d3:c9:
                    91:cd:5c:45:30:e1:6e:87:c0:40:74:d6:d8:d3:7b:
                    fd:8a:ab:34:d0:be:d1:4e:9e:48:44:70:fb:5f:68:
                    24:af:93:cf:6e:ee:5c:c1:db:7c:fc:90:3e:cd:69:
                    dc:71:35:8f:83:77:f4:ef:fd:a9:26:4a:8f:e5:2b:
                    1d:16:bd:48:4b:06:bd:a3:ee:02:08:eb:d0:67:72:
                    b0:a5:1e:b8:58:6a:cc:a5:00:2c:ee:46:95:d1:a8:
                    ad:d1:9b:a6:5d:e8:78:46:ed:c2:98:f8:dc:0b:ef:
                    42:79:cb:39:a2:c6:a2:12:16:4d:67:79:48:9f:9d:
                    c5:02:fe:3b:49:00:0f:85:64:1a:8e:c1:47:31:c5:
                    37:66:c9:f8:db:d0:35:a5:9d:6d:59:f7:55:00:31:
                    a0:3e:6c:a2:84:54:20:b0:1f:20:a1:79:d7:1b:42:
                    4a:ad:a0:84:6f:88:63:5c:b7:bb:e0:54:01:fe:5f:
                    02:01:00:42:3b:ce:49:9f:2f:51:6a:04:42:ea:94:
                    e3:a8:0e:3c:03:f2:34:14:aa:ff:e6:95:77:cd:1e:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.7.172.0/24
                IPv6:
                  2a13:83c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197937

    Signature Algorithm: sha256WithRSAEncryption
         9b:77:c3:3d:a9:2d:b5:cd:60:05:d8:27:0d:9c:99:aa:a4:51:
         03:ba:95:4f:a7:d1:74:ee:aa:86:b5:f2:50:23:fc:e0:fe:86:
         a7:58:ea:24:2f:79:33:47:4d:03:82:c1:b1:39:6e:02:8b:4d:
         83:dd:62:fa:aa:9b:1f:0f:d8:be:81:b5:0e:92:2a:54:ef:f5:
         c9:7a:eb:55:c4:45:36:c2:ce:3b:57:65:18:cf:a1:59:3e:27:
         e0:70:2b:67:3c:cb:11:5e:06:f3:28:d9:e1:4b:df:c5:9c:55:
         89:2b:6c:29:7c:53:de:f9:cc:d6:ce:55:c3:a5:14:97:cc:85:
         21:de:25:e8:4d:f8:ae:7c:1b:3d:eb:68:74:c5:b9:3e:8e:60:
         e3:8f:6e:5d:78:aa:44:36:3c:74:cb:b0:8a:f2:4b:63:20:ce:
         eb:d5:93:f8:a0:e6:ec:ca:80:f7:e1:e7:46:a4:19:14:4c:8b:
         32:5b:2a:d1:fc:46:1b:db:f6:0c:3f:c4:ca:85:3b:2c:29:ef:
         c1:51:39:8f:ca:d3:9e:89:cf:91:9d:10:28:ad:d6:4e:e2:cf:
         d7:e1:51:b1:c0:b3:d8:28:d3:e1:c8:1c:fe:e1:f0:63:83:c9:
         54:f7:df:f3:b2:d8:ae:b9:ca:9d:9c:67:d6:16:ac:c4:28:71:
         d2:f5:a5:b3
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZRKC1+Asbb8QRn1mGWstYAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTA5MDc1MDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDZmOWJlNzgzZDczZDk1YWI4YWE1NDYxOWU2MGY5MDExYzA0ZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS5+wLiMJHkEqYGRt0Dw6UlScoVn
p6engR0+fP6rhGXPFPy8DkbQCTLY08mRzVxFMOFuh8BAdNbY03v9iqs00L7RTp5I
RHD7X2gkr5PPbu5cwdt8/JA+zWnccTWPg3f07/2pJkqP5SsdFr1ISwa9o+4CCOvQ
Z3KwpR64WGrMpQAs7kaV0ait0ZumXeh4Ru3CmPjcC+9Cecs5osaiEhZNZ3lIn53F
Av47SQAPhWQajsFHMcU3Zsn429A1pZ1tWfdVADGgPmyihFQgsB8goXnXG0JKraCE
b4hjXLe74FQB/l8CAQBCO85Jny9RagRC6pTjqA48A/I0FKr/5pV3zR7I6QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCRvm+eD1z2Vq4qlRhnmD5ARwE1nMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5L2JhYTM3
Mi04MjNiLTRiMDctOWFhYi1jYmJkMDFmMmI5MWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvYmFhMzcy
LTgyM2ItNGIwNy05YWFiLWNiYmQwMWYyYjkxYy8xL0pHLWI1NFBYUFpXcmlxVkdH
ZVlQa0JIQVRXYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuQesMA0EAgACMAcDBQMqE4PAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMFMTANBgkqhkiG9w0BAQsFAAOCAQEAm3fDPakttc1g
BdgnDZyZqqRRA7qVT6fRdO6qhrXyUCP84P6Gp1jqJC95M0dNA4LBsTluAotNg91i
+qqbHw/YvoG1DpIqVO/1yXrrVcRFNsLOO1dlGM+hWT4n4HArZzzLEV4G8yjZ4Uvf
xZxViStsKXxT3vnM1s5Vw6UUl8yFId4l6E34rnwbPetodMW5Po5g449uXXiqRDY8
dMuwivJLYyDO69WT+KDm7MqA9+HnRqQZFEyLMlsq0fxGG9v2DD/EyoU7LCnvwVE5
j8rTnonPkZ0QKK3WTuLP1+FRscCz2CjT4cgc/uHwY4PJVPff87LYrrnKnZxn1has
xChx0vWlsw==
-----END CERTIFICATE-----